Legal
TREX OTT Privacy Policy
What TREX OTT holds about your business, how your customers’ data is handled on your instructions, and what that means for your own compliance obligations.
Two different roles. For your business data, TREX OTT decides how it is used and is therefore the controller. For your customers’ data that you enter into the panel, you decide what goes in and why — you are the controller and TREX OTT processes it on your instructions. This distinction matters for your own compliance obligations, so read section two.
1. Data about you and your business
- Account and billing — business name, contact name, email, and the billing details needed to invoice you and to meet accounting obligations.
- Credit ledger — purchases, allocations to sub-resellers and consumption, because the panel cannot reconcile an account without them.
- Panel activity — sign-ins, actions taken and API calls made, retained for security and for investigating disputes about what happened on an account.
- Support correspondence — WhatsApp, Telegram, email and in-panel chat.
- Server logs — IP address, user agent and request time.
2. Data about your customers
When you create a line, you may enter details identifying one of your customers. TREX OTT stores and processes that data on your instructions, for the purpose of operating the service you sold, and does not market to those people or use their data for its own purposes.
Because you are the controller of that data:
- you are responsible for having a lawful basis to collect it and for telling your customers what you do with it;
- you should enter the minimum needed to run the line — a reference and a contact method is usually enough, and a customer’s full identity documents never are;
- a request from one of your customers to access or delete their data comes to you, not to us, and we will act on your instruction.
If your own compliance regime requires a written data-processing agreement, ask sales for one rather than treating this page as a substitute.
3. Sub-resellers
A sub-reseller you create sees their own customers and their own credit balance. They do not see yours. You can see the credits you allocated to them. Once you create a sub-reseller you are introducing another party into the handling of end-customer data, and you should satisfy yourself that they are fit to hold it.
4. Credentials and secrets
API keys and panel passwords are access credentials, not personal data, but they are treated as confidential and are never published, quoted in marketing, or sent to you unsolicited. Any message that sends or requests them is not from TREX OTT.
5. Cookies on this website
| Purpose | Set when | Notes |
|---|---|---|
| Cart and checkout | You add a credit pack to the cart | Set by WooCommerce. |
| Login session | You sign in | Set by WordPress. |
Widget identifier (trex_client_id) | You first use an on-site request widget | Since 22 August 2026 this is set only when a widget is actually used, not on every page view. |
6. Sharing and retention
Business data is shared only with the payment provider handling your transaction, the hosting provider, and where legally required. Billing records are retained for the period accounting and tax law requires. Panel activity and logs are retained for a limited operational and security period. End-customer data entered by you is retained while the line exists and for a short period afterwards, and is deleted sooner on your instruction.
7. Your rights
You can request a copy of the business data held about you, ask for corrections, ask for deletion where we are not required to retain it, and object to processing based on legitimate interests. Ask via contact or [email protected], from the address on the account.
Last reviewed 22 August 2026. This date changes only when the text changes.